Damn Vulnerable Linux (DVL) was a Slackware and Slax-based live DVD. The distribution, purposefully stuffed with broken, ill-configured, outdated and exploitable software, began life as a training system used during the author's university lectures. Its primary goal was to design a Linux system that was as vulnerable as possible -- in order to teach and demonstrate a variety of security topics, including reverse code engineering, buffer overflows, shell code development, web exploitation, and SQL injection.

The NetBSD project develops a lightweight operating system which runs on a wide range of hardware architectures. The project's latest release in the 7.x series is NetBSD 7.2, which offers USB 3.0 support, enhancements to Linux emulation, support for running on the Raspberry Pi 3 computer and updated drivers. "The NetBSD Project is pleased to announce NetBSD 7.2, the second feature update of the NetBSD 7 release branch. It represents a selected subset of fixes deemed important for security or stability reasons, as well as new features and enhancements. Some highlights of the 7.2 release are: support for USB 3.0; enhancements to the Linux emulation subsystem; fixes in binary compatibility for ancient NetBSD executables; iwm(4) driver for Intel Wireless 726x, 316x, 826x and 416x series added; support for Raspberry Pi 3 added; fix interrupt setup on Hyper-V VMs with Legacy Network Adapter; SVR4 and IBCS2 compatibility subsystems have been disabled by default (besides IBCS2 on VAX), these subsystems also do not auto-load their modules any more; various USB stability enhancements; numerous bug fixes and stability improvements." Further information can be found in the project's release announcement and in the release notes. Download (MD5): NetBSD-7.2-amd64.iso (389MB, torrent), NetBSD-7.2-i386.iso (419MB, torrent).

NetBSD is a free, secure, and highly portable UNIX-like Open Source operating system available for many platforms, from 64-bit AlphaServers and desktop systems to handheld and embedded devices. Its clean design and advanced features make it excellent in both production and research environments, and it is user-supported with complete source. Many applications are easily available through The NetBSD Packages Collection.

Martin Husemann has announced the availability of the second (and probably final) release candidate for NetBSD 8.0, a highly portable operating system available for dozens of processor architectures. The new release candidate fixes a number of issues that existed in the previous snapshot and includes kernel security fixes for CPU bugs. "The NetBSD Project is pleased to announce NetBSD 8.0 RC 2, the second (and hopefully final) release candidate for the upcoming NetBSD 8.0 release. Unfortunately the first release candidate did not hold up in our extensive testing (also know as eating our own dog food): many NetBSD.org servers/machines were updated to it and worked fine, but the auto build cluster, where we produce our binaries, did not work well. The issue was tracked down to a driver bug (Intel 10 GBit Ethernet), only showing up in certain configurations, and it has been fixed now. Other security events, like the new FPU related exploit on some Intel CPUs, caused further kernel changes, so we are not going to release NetBSD 8.0 directly, but instead provide this new release candidate for additional testing. " More information can be found in the project's release announcement. Download (SHA512): NetBSD-8.0_RC2-amd64.iso (716MB), NetBSD-8.0_RC2-i386.iso (677MB).

Martin Husemann has announced the availability of the first release candidate for NetBSD 8.0, a highly portable operating system available for over 50 processor architectures: "On behalf of the NetBSD project, it is my pleasure to announce the first release candidate of NetBSD 8.0. Many changes have been made since 7.0. Here are a few highlights: USB stack rework, USB 3 support added; in-kernel audio mixer; reproducible builds; PaX MPROTECT (W^X) memory protection enforced by default on some architectures with fine-grained memory protection and suitable ELF formats - i386, amd64, evbarm, landisk, pmax; PaX ASLR enabled by default on i386, amd64, evbarm, landisk, pmax, sparc64; MKPIE (position independent executables) by default for userland on: i386, amd64, arm, m68k, mips, sh3, sparc64; added can(4), a socket layer for CAN busses; added ipsecif(4) for route-based VPNs; made part of the network stack MP-safe NET_MPSAFE kernel option is required to try; WAPBL stability and performance improvements...." Read the rest of the release announcement for further information. Download (SHA512) the installation images for the amd64 and i386 architectures from here: NetBSD-8.0_RC1-amd64.iso (563MB), NetBSD-8.0_RC1-i386.iso (573MB).

Soren Jacobsen has announced the release of NetBSD 7.1.2. NetBSD is a lightweight operating system specifically designed to run on a large range of hardware and processor platforms. Version 7.1.2 is a security and bug-fix upgrade: "The NetBSD Project is pleased to announce NetBSD 7.1.2, the second security and bug-fix update of the NetBSD 7.1 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. If you are running an earlier release of NetBSD, we strongly suggest updating to 7.1.2. Changes between 7.1.1 and 7.1.2: security advisory fixes - NetBSD-SA2018-003 remote DoS in IPsec (IPv6) and NetBSD-SA2018-004 remote memory corruption in IPv6; disable compat_svr4 and compat_svr4_32 by default on all ports; disable compat_ibcs2 everywhere but on Vax; remove svr4, svr4_32, ibcs2, freebsd from the module autoload list; disable LSRR (loose source and record route) and SSRR (strict source and record route) by default; amd64 - make the direct map non-executable...." See the release announcement and release notes for more details. Installation images of NetBSD 7.1.2 are available for over 50 different platforms; here are the links to the amd64 and i386 architectures (SHA512): NetBSD-7.1.2-amd64.iso (376MB, torrent), NetBSD-7.1.2-i386.iso (408MB, torrent).

Soren Jacobsen has announced the release of NetBSD 7.1.1, a security and bug-fix update from the project that develops a lightweight operating system that runs on a wide range of hardware platforms: "The NetBSD Project is pleased to announce NetBSD 7.1.1, the first security/critical update of the NetBSD 7.1 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. The following security advisories were fixed: buffer overflow via cmap for 4 graphics drivers; x86 - vulnerabilities in context handling; Vnode reference leak in the openat system call. Userland changes: dhcrelay(8) - fix bug that prevented proper operation when run in the background; Heimdal - update to 7.1; mtree(8) - don't modify strings stored in hash, otherwise filling up of directory hierarchy stops if the same hash value occurs in directory and leaf...." Here is the brief release announcement, with a detailed changelog provided in the release notes. Installation images of NetBSD 7.1.1 are available for 54 different platforms; here are the quick links to the amd64 and i386 architectures (SHA512): NetBSD-7.1.1-amd64.iso (376MB, torrent), NetBSD-7.1.1-i386.iso (408MB, torrent).

The NetBSD project develops a lightweight operating system which runs on a wide range of hardware architectures. The project's latest release, NetBSD 7.1, features support for running on the minimal Raspberry Pi Zero computer and includes initial KMS support for NVIDIA video cards with the nouveau open source driver. NetBSD's Linux compatibility layer has been updated and can now run the Linux version of Adobe Flash Player. "The NetBSD project is pleased to announce NetBSD 7.1, the first feature update of the NetBSD 7 release branch. It represents a selected subset of fixes deemed important for security or stability reasons, as well as new features and enhancements. Some highlights of the 7.1 release are: support for Raspberry Pi Zero; initial DRM/KMS support for NVIDIA graphics cards via nouveau (disabled by default, uncomment nouveau and nouveaufb in your kernel config to test); the addition of vioscsi, a driver for the Google Compute Engine disk; Linux compatibility improvements, allowing, the use of Adobe Flash Player 24." Additional information can be found in the project's release announcement. Download (MD5): NetBSD-7.1-amd64.iso (373MB, torrent), NetBSD-7.1-i386.iso (406MB, torrent).

The NetBSD project has announced a second security update to the highly portable operating system's 7.0.x branch. The new release, NetBSD 7.0.2, mostly fixes bugs and potential crashes in the operating system's core components. "The NetBSD Project is pleased to announce NetBSD 7.0.2, the second security/bugfix update of the NetBSD 7.0 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. If you are running an earlier release of NetBSD, we strongly suggest updating to 7.0.2." In addition, the OpenSSL, ntp and BIND components have updated: "Update OpenSSL to 1.0.1u. Update ntp to 4.2.8p8. Update BIND to 9.10.4-P3. Fix several protocol handling issues in X Window System client libraries. libsa getpass: check bounds on input." The project's release announcement, the release notes for NetBSD 7.0.2 and the detailed changes file have further information on the new update. Download (MD5): NetBSD-7.0.2-amd64.iso (372MB, torrent), NetBSD-7.0.2-i386.iso (405MB, torrent).

Soren Jacobsen has announced the release of NetBSD 7.0.1, the first bug-fix and security update of the project's 7.x release branch: "The NetBSD project is pleased to announce NetBSD 7.0.1, the first security/bug-fix update of the NetBSD 7.0 release branch. It represents a selected subset of fixes deemed important for security or stability reasons. If you are running an earlier release of NetBSD, we strongly suggest updating to 7.0.1." This brief release announcement was published on the NetBSD blog, with a detailed changelog provided in the release notes. Some of the technical changes include: "Add wip.pkgsrc.org to ssh_known_hosts; void 'vnconfig -l' infinite loop with netbsd-6 or older userland; avoid a crash when mounting an ados file system; avoid a panic when unplugging a mounted umass(4) device; don't leak garbage from the kernel stack on sleep(0) and equivalents; fix ARM1136 function selection...." This NetBSD release is available for 54 processor architectures; quick links to download the installation ISO images for the amd64 and i386 platforms: NetBSD-7.0.1-amd64.iso (372MB, MD5, torrent), NetBSD-7.0.1-i386.iso (405MB, MD5, torrent).